DisclosureLens
Feed News/Feed status · Hawaii OCP

Hawaii's Breach List Keeps Getting Shorter. We Saved the Notices It Deleted.

Hawaii's public breach registry quietly shrank from 138 rows to 55, dropping years of older notices while the live feed kept reading healthy. We recovered the 84 filings it erased — several now survive in the open only in our copy.

By DisclosureLens · July 24, 2026
WatchSource: state_ag_hawaii
Last capture
July 23, 2026
Poller
0 failed runs
Holdings
134 records
Last checked
July 31, 2026 · succeeded

The badge and figures above are read live from /v1/health/sources on each render. Polled hourly on weekdays (13–22 UTC); holdings were diffed against the web archive during the July recovery and re-diffed when the table shrinks again.

Not every source goes dark with a slammed door. Some just get quieter, one deleted row at a time. Hawaii's Office of Consumer Protection keeps its breach notices in a single web table — and across two months of 2026, that table lost more than half its entries.

What happened. We read the page on every poll, and the row count told the story: 138 notices through April, 90 by May 9, 55 today. This wasn't a migration dropping rows by accident. When the office rebuilt its site in 2026 it re-posted its older letters, then added nothing new and kept trimming the list. The status light stayed green the whole time — the page loads, the poll succeeds. A health check sees a working source. It cannot see a shrinking one.

Why it matters. A breach notice doesn't stop being true when a state takes it off a web page. Older Hawaii filings — some more than a decade old — name real companies and real resident counts, and they're exactly the records a journalist or a plaintiff's lawyer reaches for years after the fact. Once a row is deleted and the original letter 404s, the only proof it was ever published is whatever someone archived.

What we saved. Across every snapshot of the page, 135 distinct notices were ever published. We already held 50 of them; 84 more — spanning July 2007 to March 2024, and naming companies like TD Ameritrade (33,157 Hawaii residents), Health Net, PenFed, and Wyndham — survive in the open only in the web archive. We recovered all 84, each sourced to its archived snapshot, and folded them back into the record. Hawaii now accounts for 134 filings in our corpus.

How we caught it. A frozen-looking page is not proof a source is dead — it can equally mean the source is being pruned. The only way to tell them apart is to diff what you hold against what the archive proves was once published. That check is what surfaced the 84-row gap here, and we run it for any source that goes quiet.

How we're watching. Hawaii's live feed still works, so we keep polling it and pick up anything new it does post. But the direction of travel here is subtraction, not addition — so we treat our copy, not the state's page, as the record of what Hawaii once disclosed.

Update log

  1. July 22, 2026
    Recovered

    Diffing our holdings against every archived snapshot of the Hawaii page surfaced 84 notices (2007–2024) that had been deleted from the live table and whose original letters now 404. Recovered all 84 from the web archive and added them to the record; Hawaii holdings rose 50 → 134.

  2. May 9, 2026
    Pruned

    Hawaii's published breach table dropped from 138 rows to 90, and later to 55 — years of older notices removed while the poller kept succeeding.

DisclosureLens tracks the state of every source it collects, not just the records. When this feed changes — restored, relocated, or gone for good — we log it here and notify subscribers. Browse the preserved per-state archives under /breach-notifications.